8bc50d8090e5d1cffca96509e988d75063264f8d2408808189719e569e6bfa68 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

f_00101c.msi

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
f_00101c.zip
Size 22.1MB
Sample260818-m7k49sssdv
SHA256 8bc50d8090e5d1cffca96509e988d75063264f8d2408808189719e569e6bfa68
MD5 f37b74fc6fcd4b15244bcc0249b765b0
SHA1 406773f4017e1a08fcf8c7a3efd89b8e651a7b50
SHA512 1b8e214128b1077481a60544fca153a022cfb518afb5db129ba78b945dcbbd60201246f602e455c1566cb58574115b8f98e390eef90c9c84c9dfe7bc081cad71
SSDEEP 393216:xK7bEaSvZ1umX9Uav/JwEm+AS1En13TOeg0e+5rrU3itInikdCC6wAy4rhp433x:xGdSfue9v/JwEFASCDekUiSikF43dG3x
TLSH
T1F83733399621A1DA90369EC7ED1FC8077501D475BFABE9017F886818B57A3B1FFB9002
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f_00101c.msi

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

15 signatures

600 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  f_00101c
- Size 22.4MB
- SHA256 46831be6e577e3120084ee992168cca5af2047d4a08e3fd67ecd90396393b751
- MD5 06e475ca8ad5153f53d5201f2fca9f88
- SHA1 23c6e99c83eba0acac0565acc7b5c34e28b73db7
- SHA512 ccdcb9ae864bc16a08630c558d8e1dbd922cec8eea91b1d3e279ad1e036956c0eea56376647a56c6b7432ec6c38bcba1a919fa8099a593028582291a400b4d2d
- SSDEEP 393216:8ObZm4O2bnUUJ2gtiAYovg8aMIKTa/JOBIPn12JYWY5p8E2xJU6YBQM4b1+:8eRO2z32qiuvg8DIKNs1rzSEyilat+
- TLSH
  T1DD3733256462127DD5160972D82ECA287743BD186ABAC946778C3D2F3777EF0BBB1203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy